pkraah Privacy Policy

Section 01

1. Who We Are

pkraah operates as an internationally licensed online gaming and sports betting platform accessible at pkraah.vip. The Platform is specifically designed to serve English-speaking Pakistani players, offering cricket betting, PSL sports wagering, live casino games including baccarat, and a comprehensive slot library. pkraah operates under an international gaming licence and is committed to maintaining the data protection standards required under that licence framework.

For the purposes of data protection law, pkraah acts as the data controller in respect of the personal data you provide directly to pkraah during registration, verification, and platform use. Where pkraah engages third-party service providers to process data on its behalf — such as payment processors or KYC verification services — those providers act as data processors under pkraah's instruction and are subject to contractual data protection obligations.

If you have any questions about how pkraah handles your personal data, the primary point of contact is pkraah's Data Support Team, reachable via live chat on the Platform or by email at support@pkraah.vip.

Section 02

2. Scope of This Policy

This Privacy Policy applies to all personal data collected and processed by pkraah in connection with:

• The creation and management of pkraah player accounts.
• Deposits, withdrawals, and financial transactions conducted via pkraah's supported Pakistani payment methods (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, Bank Alfalah).
• Participation in casino games, slot games, and sports betting markets including cricket, PSL, and other events offered on the Platform.
• Interactions with pkraah's customer support team via live chat, email, or any other channel available on the Platform.
• Use of pkraah's responsible gaming tools, including self-exclusion, deposit limits, and cooling-off features.
• pkraah's marketing communications, where you have provided consent or where pkraah has a legitimate interest in communicating with you.

This Policy does not apply to third-party websites or services that may be linked to or from the pkraah Platform. pkraah is not responsible for the data practices of any third-party site or service, and we encourage you to review the privacy policies of any external service you access independently.

Section 03

3. Data We Collect

pkraah collects personal data across several categories, as detailed in the data table above. In summary, the categories of personal data pkraah collects include:

• Identity Data: Your full legal name, date of birth, CNIC number, and nationality — collected to verify your identity and ensure you meet the 21+ age requirement.
• Contact Data: Pakistani mobile number, email address, and city of residence — used for account communication, OTP delivery, and support.
• Financial Data: Payment method identifiers (e.g. JazzCash wallet number, bank account details), transaction amounts, and PKR balance history — required for deposit and withdrawal processing.
• Gaming Activity Data: Your complete betting and gameplay history on pkraah, including cricket bets, PSL wagers, slot spins, and live casino sessions — retained for account management, dispute resolution, and responsible gaming monitoring.
• Technical Data: IP address, device identifiers, browser type, operating system, and session timestamps — collected automatically to maintain platform security and prevent fraud.
• Communication Data: Records of your interactions with pkraah's customer support team, including chat transcripts and email correspondence.
• Responsible Gaming Data: Any self-exclusion requests, limit-setting instructions, or cooling-off activations you apply to your pkraah account.

Section 04

4. How We Collect Your Data

pkraah collects personal data through the following mechanisms:

• Direct Collection: Data you provide actively when completing the pkraah registration form, submitting KYC documents, initiating a deposit or withdrawal, contacting support, or updating your account profile.
• Automated Collection: Technical data collected automatically by pkraah's platform infrastructure when you log in, browse the site, or interact with any game or betting market. This includes IP address logging, device fingerprinting for fraud prevention, and session duration recording.
• Third-Party Sources: In certain cases, pkraah may receive identity verification data from KYC service providers to whom you have submitted documentation, or fraud-screening data from industry-shared databases used to prevent multi-accounting and money laundering. pkraah will only use such data in ways consistent with this Policy.
• Cookies and Similar Technologies: As described in Section 8 of this Policy, pkraah uses cookies and similar tracking technologies to maintain session continuity, personalise your experience, and analyse platform usage patterns.

Section 05

5. How We Use Your Data

pkraah uses the personal data it collects strictly for the following stated purposes:

• Account Creation and Management: To register your pkraah account, authenticate your identity, maintain your account profile, and deliver core platform services including deposits, withdrawals, and betting functionality.
• Identity and Age Verification: To confirm that you meet the 21+ age requirement and are a genuine individual, in compliance with pkraah's licensing obligations and responsible gaming commitments.
• Payment Processing: To process PKR deposits and withdrawals via your chosen Pakistani payment method, reconcile transactions, and maintain accurate financial records.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the pkraah Platform.
• Regulatory and Legal Compliance: To fulfil pkraah's obligations under its international gaming licence, applicable AML/CFT regulations, and any lawful requests from regulatory or law enforcement authorities.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, to administer self-exclusion and limit-setting requests, and to fulfil pkraah's duty of care to players under its responsible gaming policy.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve pkraah's games, betting markets, user interface, and overall player experience.
• Marketing Communications: To send you promotional offers, PSL season bonuses, and other relevant communications — only where you have given consent or where pkraah has a legitimate interest, and always with an accessible opt-out mechanism.

Section 06

6. Legal Bases for Processing

pkraah processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases pkraah relies upon are as follows:

• Contract Performance: Processing necessary to deliver the services described in pkraah's Terms & Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with pkraah's gaming licence conditions, AML/KYC regulations, financial record-keeping obligations, and lawful regulatory requests.
• Legitimate Interests: Processing conducted for pkraah's legitimate business interests where those interests are not overridden by your rights — specifically, fraud prevention, platform security, technical data analysis, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing or your ability to continue using pkraah.
• Vital Interests: In limited circumstances, processing to protect your vital interests — for example, where pkraah has a serious concern about a player's wellbeing in the context of responsible gaming obligations.

Section 07

7. Data Sharing & Disclosure

pkraah does not sell personal data to third parties. pkraah may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, Bank Alfalah, and other approved Pakistani payment service providers — to facilitate your deposits and withdrawals. These providers receive only the financial data necessary to process your specific transaction.
• KYC and Identity Verification Providers: Authorised identity verification services used by pkraah to confirm player identity and age in compliance with licensing requirements. These providers process identity documents under strict data processing agreements.
• Game Suppliers: Certified third-party game providers whose software powers pkraah's slot and live casino offerings. These providers may receive session data necessary to deliver and log game outcomes; they do not receive your full identity profile.
• Fraud Prevention Services: Industry-standard fraud screening and risk management services used to protect the pkraah platform and its players from criminal activity.
• Regulatory and Law Enforcement Authorities: Where pkraah is legally required to disclose data to a gaming regulator, financial intelligence unit, or law enforcement body under applicable law or its licensing conditions. pkraah will only make such disclosures as required and will notify you where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by pkraah, subject to professional confidentiality obligations.

Section 08

8. Cookies & Tracking Technologies

pkraah uses cookies and similar tracking technologies on its Platform. Cookies are small text files stored on your device that help pkraah recognise your browser, maintain your session, and understand how you interact with the Platform. pkraah uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform operation — including session management, login authentication, and security functions. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously selected payment methods to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how players navigate and use the pkraah Platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This data is used in aggregate form to improve the Platform and is not linked to individual player identities for marketing purposes.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and bot access to the Platform.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the pkraah Platform, including logging in to your account. Disabling functional or analytics cookies will not prevent you from accessing core Platform services.

Section 09

9. Data Security

pkraah implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, loss, destruction, or disclosure. Key security measures in place include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data transmitted between your device and pkraah's servers.
• Access Controls: Strict role-based access controls ensuring that pkraah staff can only access personal data to the extent necessary for their specific operational role. All staff with data access undergo regular security training.
• Authentication: Multi-factor authentication required for all pkraah administrative system access. Player accounts are protected by OTP-based login verification.
• Security Monitoring: Continuous automated monitoring of pkraah's systems for anomalous access patterns, intrusion attempts, and data exfiltration indicators.
• Penetration Testing: Regular third-party penetration testing of pkraah's platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: A documented data breach response procedure, including notification obligations to affected players and relevant regulatory authorities within the timeframes required under pkraah's licensing conditions.

Section 10

10. International Data Transfers

pkraah operates as an internationally licensed platform, and some of the third-party service providers it engages — including KYC verification services, fraud screening tools, and game software suppliers — may be based in or process data in jurisdictions outside Pakistan. Where such international data transfers occur, pkraah ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to this Policy.

Safeguards used for international transfers include contractual data protection clauses (equivalent to standard contractual clauses under recognised international data protection frameworks), binding corporate rules where applicable, and transfers only to recipients in jurisdictions that maintain adequate data protection standards as assessed by pkraah's compliance function.

Details of the specific countries to which your data may be transferred and the safeguards in place are available on request from pkraah's data support team at support@pkraah.vip.

Section 11

11. Data Retention

pkraah retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by pkraah's licensing obligations, applicable financial regulations, or legal proceedings. The key retention periods that apply to pkraah player data are summarised in the data table in Section 3 above.

As a general principle, pkraah applies the following retention framework:

• Identity and financial data is retained for a minimum of 5 to 7 years following account closure, in compliance with AML record-keeping requirements.
• Gaming activity data is retained for 5 years following your last activity on the Platform.
• Responsible gaming data — particularly self-exclusion records — is retained for the duration of the exclusion period plus a minimum of 5 years, to prevent circumvention of exclusion by re-registration.
• Technical and session data is retained on a rolling 12-month basis.
• Customer support communications are retained for 3 years following the resolution of the relevant interaction.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which individual identities cannot be re-identified) may be retained indefinitely for platform analytics and improvement purposes.

Section 12

12. Your Rights Over Your Data

pkraah respects your rights in relation to your personal data. Subject to applicable data protection law and certain exceptions related to pkraah's regulatory obligations, you have the following rights:

• Right of Access: You may request a copy of all personal data pkraah holds about you. pkraah will respond within 30 days of receiving a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your pkraah account. For standard profile data, you can update most details directly via the account dashboard.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to pkraah's regulatory retention obligations. Note that pkraah cannot delete data it is legally required to retain under its licensing or AML compliance framework.
• Right to Restriction of Processing: You may request that pkraah restricts processing of your data in certain circumstances — for example, while a dispute over data accuracy is being resolved.
• Right to Data Portability: You may request a copy of data you have provided to pkraah in a structured, commonly used, machine-readable format, for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on pkraah's legitimate interests or for direct marketing purposes. Where you object to marketing, pkraah will cease marketing communications promptly.
• Rights Related to Automated Decision-Making: Where pkraah uses automated systems to make decisions that significantly affect you — such as automated fraud flags — you have the right to request human review of such decisions.

To exercise any of these rights, please contact pkraah's data support team via live chat on the Platform or at support@pkraah.vip with "Data Rights Request" in the subject line. pkraah may request verification of your identity before processing a rights request to ensure data is not disclosed to unauthorised parties.

Section 13

13. Children & Minors

The pkraah Platform is strictly intended for individuals aged 21 years and older. pkraah does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. The registration process includes age verification steps specifically designed to screen out underage applicants.

If pkraah becomes aware that personal data has been collected from an individual who is under 21 years of age, pkraah will take immediate steps to close the relevant account, delete the associated personal data (subject only to any data preservation obligations arising from the underage access incident itself), and report the matter as required under its licensing conditions.

Section 14

14. Marketing & Communications

pkraah may send you marketing communications about promotions, bonuses, PSL betting offers, new game launches, and other pkraah services. The basis on which pkraah may contact you for marketing purposes depends on the type of communication:

• Existing Player Communications: pkraah may contact existing players about relevant offers and Platform updates based on its legitimate interest in maintaining an ongoing relationship with active players, provided you have not opted out of such communications.
• Consent-Based Marketing: For any marketing communications beyond the scope of pkraah's legitimate interests — such as third-party product promotions or profiled marketing — pkraah will only contact you where you have given explicit, documented consent.

You may opt out of marketing communications at any time by:

• Using the unsubscribe mechanism included in every marketing email pkraah sends.
• Updating your communication preferences in the account settings section of the pkraah Platform.
• Contacting pkraah support directly at support@pkraah .vip with "Unsubscribe" in the subject line.

Opting out of marketing communications will not affect your ability to continue using the pkraah Platform, nor will it affect transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or account verification messages — these are sent as part of the service and cannot be disabled while your account is active.

Section 15

15. Policy Updates

pkraah may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. When material changes are made to this Policy, pkraah will notify active players via the Platform's notification system and/or by email to the address registered on your pkraah account, providing a minimum of 14 days' notice before changes take effect.

The effective date at the top of this Policy and in the version reference always reflects the date the most recent version came into force. We encourage you to review this Policy periodically. Continued use of the pkraah Platform following the effective date of any updated Policy constitutes acceptance of the revised terms, to the extent permitted by applicable law.

Previous versions of this Privacy Policy are available on request from pkraah's support team.

Section 16

16. Contact & Complaints

If you have any questions, concerns, or complaints about how pkraah handles your personal data, or if you wish to exercise any of the rights described in Section 12, please contact pkraah's Data Support Team using the details below:

• Email: support@pkraah.vip (subject line: "Privacy / Data Request")
• Live Chat: Available 24/7 via the pkraah Platform — average response time 3–5 minutes

pkraah is committed to resolving all data-related complaints promptly and fairly. If you submit a complaint, pkraah will acknowledge receipt within 5 business days and aim to provide a full response within 30 days. Where a complaint requires extended investigation, pkraah will keep you informed of progress and expected resolution timelines.